| Package | Affected versions | Patched versions |
|---|---|---|
| backstage | = 1.51.0≥ 1.51.1, < 1.54.6< 1.50.5 | 1.54.61.50.5 |
| backstage plugin-techdocs-node | ≥ 1.15.0, < 1.15.4< 1.14.6 | 1.15.41.14.6 |
| @backstage/plugin-techdocs-node | < 1.15.4 | 1.15.4 |
An authenticated user who can register catalog entities can provide a crafted mkdocs.yml causing arbitrary OS command execution on the TechDocs build host when the docs are built.
Patched in @backstage/plugin-techdocs-node, version 1.15.4.
If you cannot upgrade immediately:
techdocs.builder: external to isolate TechDocs builds in a container.markdown_extensions values in their mkdocs.yml files.Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free